1. Welcome! Please take a few seconds to create your free account to post threads, make some friends, remove a few ads while surfing and much more. ClutchFans has been bringing fans together to talk Houston Sports since 1996. Join us!

  2. ROCKETS GAMEDAY
    Dave and Bryson (@RedNationBlogga) hop on for the late-night recap after the Rockets take on Nikola Jokic and the Nuggets in Denver. Come join us!

    LIVE! ClutchFans on YouTube

For everyone who uses gmail

Discussion in 'BBS Hangout' started by rhadamanthus, Aug 20, 2008.

  1. rhadamanthus

    rhadamanthus Member

    Joined:
    Nov 20, 2002
    Messages:
    14,304
    Likes Received:
    596
  2. moestavern19

    moestavern19 Member

    Joined:
    Dec 8, 1999
    Messages:
    39,003
    Likes Received:
    3,644
    thanks for the heads up.
     
  3. the futants

    the futants Member

    Joined:
    Jul 26, 2002
    Messages:
    5,157
    Likes Received:
    175
  4. Hayesfan

    Hayesfan Member
    Supporting Member

    Joined:
    Nov 3, 2006
    Messages:
    11,115
    Likes Received:
    796
    ditto thanks for the news! I already changed my settings.
     
  5. D-Lite

    D-Lite Member

    Joined:
    Mar 30, 2007
    Messages:
    829
    Likes Received:
    62
    so why does this setting make my account resistive to the hack?
     
  6. rhadamanthus

    rhadamanthus Member

    Joined:
    Nov 20, 2002
    Messages:
    14,304
    Likes Received:
    596
    My understanding is that while the password is sent via secure http (SSL), the cookie is sent via normal http - which can be intercepted. Addittionally, once you logged in, it appears gmail reverted back to http. Even if you logged in manually at https://mail.google.com

    Anyhow, this just leaves you in https mode the whole time, sending all the data encrypted.

    For the record, yahoo and hotmail don't even offer SSL. And this attack works on there systems too.

    EDIT: from someone WAY smarter than me...

     
  7. Lil Pun

    Lil Pun Member

    Joined:
    Oct 6, 1999
    Messages:
    34,143
    Likes Received:
    1,038
    Thanks for the heads up. I need to change my settings.
     
  8. Jeremiah

    Jeremiah Member

    Joined:
    Jan 18, 2008
    Messages:
    2,034
    Likes Received:
    16
    I know that Google won't sit around and let this happen.

    That said, anyone know how to configure GMail on the Outlook side to set the HTTPS?
     
  9. Ziggy

    Ziggy QUEEN ANON

    Joined:
    Jun 11, 1999
    Messages:
    37,390
    Likes Received:
    13,825
    Ya I am too lazy to do anything. Google is just gonna have to circumvent this.
     
  10. The_Yoyo

    The_Yoyo Member

    Joined:
    Dec 25, 2001
    Messages:
    16,683
    Likes Received:
    2,874
    thanks for the heads up.

    does this hack also affect people who get gmail to their phone as well?
     
  11. rhadamanthus

    rhadamanthus Member

    Joined:
    Nov 20, 2002
    Messages:
    14,304
    Likes Received:
    596
    Google switching to HTTPS as default. Finally.
     
  12. REEKO_HTOWN

    REEKO_HTOWN I'm Rich Biiiiaaatch!

    Joined:
    Jun 26, 2008
    Messages:
    47,644
    Likes Received:
    19,872
    Thanks! Just changed it.
     
  13. Legend Killer

    Legend Killer Member

    Joined:
    Mar 5, 2008
    Messages:
    1,255
    Likes Received:
    15
    Thanks for the heads up... just adjusted my settings
     
  14. tested911

    tested911 Member

    Joined:
    Dec 12, 2002
    Messages:
    3,643
    Likes Received:
    127
    :) look at the orginal post date...
     
  15. DonnyMost

    DonnyMost Member

    Joined:
    May 18, 2003
    Messages:
    49,740
    Likes Received:
    21,233
    Well, crisis averted I guess.

    Normally you don't hear about a "coming hack", how odd.
     
  16. Legend Killer

    Legend Killer Member

    Joined:
    Mar 5, 2008
    Messages:
    1,255
    Likes Received:
    15

    Haha... i didn't notice that either.
     

Share This Page